Description

Cross-site request forgery (CSRF) vulnerability in Liferay Portal 7.4.1 through 7.4.3.112, and Liferay DXP 2023.Q4.0 through 2023.Q4.5, 2023.Q3.1 through 2023.Q3.10, and 7.4 GA through update 92 allows remote attackers to add and edit publication comments.

Remediation

References

CVE-2025-62245

Related Vulnerabilities

MySQL CVE-2021-2021 Vulnerability (CVE-2021-2021)

WordPress Plugin Event Espresso Lite-Event Management and Registration System SQL Injection (3.1.37.12)

WordPress Plugin Duplicator-WordPress Migration Cross-Site Scripting (1.2.28)

Oracle Database Server CVE-2012-3146 Vulnerability (CVE-2012-3146)

WordPress Plugin eShop Code Injection (6.3.11)

Severity

Medium

Classification

CVE-2025-62245 CWE-352 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

Tags

Missing Update Known Vulnerabilities